Critical · 9.8 CVE-2021-45697 EUVD-2022-0483GHSA-6p3c-v8vc-c244GHSA-82hm-vh7g-hrh9RUSTSEC-2021-0103

The `total_size` function for partial read the length of any `FixVec` is incorrect in molecule.

Published Dec 26, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result.

Ecosystem	Package	Affected	Fixed	Record
crates.io	molecule	< 0.7.2	0.7.2	GHSA-6p3c-v8vc-c244
crates.io	molecule	>= 0.0.0-0, < 0.7.2	0.7.2	RUSTSEC-2021-0103